Collaborate Disseminate
HTML5 has a DRM framework Encrypted Media Extensions (EME), that allows DRM companies to create content decryption modules (CDM) to decrypt DRM protected content. Browsers should use a sandbox to run the CDM, so that security holes that al… Continue reading How do HTML5 DRM addons protect their output?
What are the vulnerabilities of RBI ?
Continue reading What are the vulnerabilities of RBI? [on hold]
Some irrelevant background (read only if you want to say “no, just use an iframe”)
Scenario
Suppose that I downloaded a string jsCode containing arbitrary JavaScript code from a (potentially malicious) third-party server … Continue reading Sandboxing untrusted JavaScript execution by redeclaring variables
The multi-sandbox project is under continual improvement. In June 2018, we announced our integration with Dr.Web vxCube. Today we are happy to announce an update to Dr.Web vxCube that adds support for Android. With more than 2 billion active android de… Continue reading Multisandbox update to Dr.Web vxCube 1.2 brings Android analysis
Sandbox environments are a common feature of many cybersecurity solutions in their fight against advanced malware. Firewalls, endpoint protection, and even next-generation machine learning systems use sandboxes as one of their lines of defense. However… Continue reading Not All Sandboxes Are Created Equal
If a named pipe on Windows has a Low Mandatory Level label and SYSTEM_MANDATORY_LABEL_NO_WRITE_UP in its SACL, but the DACL has WRITE_DAC and WRITE_OWNER for the current user, can a low integrity process running under that us… Continue reading Can a named pipe with a low integrity label have its SACL/DACL modified by a low integrity process?
I have a GUI app I wrote for which I’ve just implemented a very basic mechanism for user-defined extensions written in Guile, a dialect of lisp. I’ve been studying how to keep this from being a vector for a Trojan horse attac… Continue reading Extension language that is sandboxed by design and by default [migrated]
I have a GUI app I wrote for which I’ve just implemented a very basic mechanism for user-defined extensions written in Guile, a dialect of lisp. I’ve been studying how to keep this from being a vector for a Trojan horse attac… Continue reading Extension language that is sandboxed by design and by default [migrated]
We are excited to announce the integration of SecondWrite into the multi-sandbox project. The multi-sandbox project’s goal is to aggregate many sandboxes in a similar fashion as the way we integrate Anti-Virus products. With this integration we a… Continue reading Multisandbox project welcomes SecondWrite
RSA Conference announces finalists for Innovation Sandbox Contest 2019, DigiCert announces all-in-one digital certificate management solution, Google’s new Chrome extension warns you about stolen passwords, Signal Sciences raises 35$ Million … Continue reading RSA, DigiCert, and Signal Sciences – Enterprise Security Weekly #125